Privacy policy

OBD PORTAL - PRIVACY POLICY

Last Updated: October 19, 2026

This Privacy Policy explains how OBDPORTAL BV ("we", "us", "our") collects and uses personal data when you visit obdportal.com, buy from our online store, create or use an account, use the OBDPortal device or the OBD Portal software (including dashboard.obdportal.com), or contact us. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1. WHO IS RESPONSIBLE FOR YOUR DATA

The controller of your personal data is OBDPORTAL BV, Bergensesteenweg 83b, 1651 Beersel, Belgium, enterprise number (KBO/BCE) 1013.816.284. For any question about this Policy or about your personal data, email us at contact@obdportal.com with "Privacy" in the subject line, or call +32 2 844 56 03.

2. WHAT DATA WE COLLECT

Customer and order data: name, email address, telephone number, billing and delivery address, company name and VAT number (business customers), the products you order, prices, payment status and invoices. Card and bank details are processed by our payment providers; we do not receive your full card number.
Account data: the details of your customer account and of your OBD Portal software account, such as username, email address, login details, Token balance, licences and purchase history.
Vehicle and usage data from the OBD Portal device and software: when you carry out a procedure, we process technical data read from the vehicle, such as the vehicle identification number (VIN), make and model, control-unit identifiers and software versions, fault codes and diagnostic data, together with the procedures performed, Token use, logs (including debug logs), the device serial number, IP address and connection data. A VIN can be personal data when it can be linked to the owner of a vehicle.
Communications: the content of your emails, contact form messages, chat and WhatsApp messages, withdrawal requests, complaints and reviews.
Website data: IP address, browser and device information, pages visited, products viewed and cart activity, collected through cookies and similar technologies (see Section 9).
Marketing data: your newsletter subscription and preferences, and whether you open or click our marketing emails.

Most of this data comes directly from you or from your use of our website, device and software. Some comes from our service providers, for example payment and delivery status. If you are a garage or workshop and use OBD Portal on a vehicle that belongs to your own customer, you are responsible for informing your customer about this processing (see Article 5.3 of our Terms of Service).

3. WHY WE USE YOUR DATA AND ON WHAT LEGAL BASIS

Purpose	Legal basis (GDPR)
Processing and delivering your order, crediting Tokens, making licences available, providing the OBD Portal software and device functions, and managing your account	Performance of a contract (Art. 6(1)(b))
Carrying out the diagnostic, coding and programming procedures you request, and keeping procedure logs to give support, restore Tokens where our Refund and Return Policy provides for it, and investigate failures	Performance of a contract (Art. 6(1)(b)) and our legitimate interest in providing reliable support (Art. 6(1)(f))
Customer service, complaints, withdrawals, returns and guarantee claims	Performance of a contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c))
Invoicing, accounting and tax obligations, including checking the VAT numbers of business customers	Legal obligation (Art. 6(1)(c))
Preventing fraud and misuse, securing our website, servers and accounts, and enforcing our Terms of Service	Our legitimate interest in protecting our business and our customers (Art. 6(1)(f))
Newsletters and marketing emails	Your consent (Art. 6(1)(a)). If you are already a customer, we may email you about our own similar products and services unless you object, which you can do at any time (Art. 6(1)(f) and the Belgian rules on electronic direct marketing)
Inviting you to review your purchase, for example on Trustpilot	Our legitimate interest in collecting customer feedback (Art. 6(1)(f)); you can opt out at any time
Analytics and marketing cookies, including personalised advertising	Your consent (Art. 6(1)(a)), given through our cookie banner

Where we rely on our legitimate interest, you can object at any time (Section 8). Where we rely on your consent, you can withdraw it at any time; this does not affect processing carried out before the withdrawal. We do not make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

4. WHO WE SHARE YOUR DATA WITH

We share personal data only where needed for the purposes above, with:

Shopify, which hosts our online store and checkout (see Section 5);
payment service providers that process your payment, as shown at checkout (for example card payments, Apple Pay and Google Pay);
delivery partners, such as Sendcloud and the carriers that deliver your parcel;
invoicing and accounting providers, such as Sufio and Billit, and our accountant;
email and marketing tools, such as Klaviyo and SendPulse;
other service providers that help us run the website and the OBD Portal software, such as server and IT providers, the provider of our online withdrawal form (EU Widerruf Button, 401layers UG, Germany), our VAT number check (VATify, which uses the EU VIES system) and review platforms such as Trustpilot;
WhatsApp (Meta), if you choose to contact us through WhatsApp; WhatsApp's own privacy policy also applies;
authorities, courts and professional advisers such as lawyers and auditors, where required by law or needed to establish, exercise or defend legal claims;
a buyer or successor of our business, in the event of a merger, acquisition or transfer of assets.

Service providers that act on our behalf may use your data only on our instructions and under a data processing agreement. We do not sell your personal data.

5. OUR RELATIONSHIP WITH SHOPIFY

Our store is hosted by Shopify (Shopify International Limited, Ireland), which processes personal data about your access to and use of the store in order to provide and improve its services. We also use certain Shopify enhanced features, such as Shopify Network Intelligence, that combine data about your interactions with our store with data from other merchants and from Shopify, for example to prevent fraud, improve products, and support ad targeting and personalisation. For those purposes Shopify is responsible for the processing of your personal data, including for responding to requests to exercise your rights. See the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

6. INTERNATIONAL TRANSFERS

Some of our service providers process data outside the European Economic Area (EEA), for example in Canada or the United States. We only allow this where the European Commission has decided that the country ensures an adequate level of protection (including, for certified US companies, the EU-U.S. Data Privacy Framework) or where appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses. You can ask us for more information about these safeguards.

7. HOW LONG WE KEEP YOUR DATA

Invoices and accounting records: 10 years, as required by Belgian accounting and tax law.
Order and contract data: as long as needed to perform the contract and to handle withdrawals, guarantee claims and other possible claims, and no longer than the applicable limitation periods.
Account data, Token balances and licences: as long as your account is active. When your account is closed, we delete or anonymise this data, except what we must keep for the reasons above.
Vehicle data and procedure logs: only as long as needed to carry out the procedure, provide support, handle Token restorations and complaints, and keep our services secure.
Customer service communications: as long as needed to handle your request and any follow-up.
Marketing data: until you unsubscribe or withdraw your consent.

8. YOUR RIGHTS

You have the right to:

access your personal data and receive a copy of it;
have inaccurate or incomplete data corrected;
have your data erased, where the law allows;
have the processing of your data restricted;
receive the data you provided to us in a structured, commonly used and machine-readable format, and have it transmitted to another controller (data portability);
object to processing based on our legitimate interest and, at any time, to direct marketing;
withdraw your consent at any time, where we rely on consent.

To exercise these rights, email contact@obdportal.com. We may ask you to confirm your identity. We reply within one month; for complex requests this may be extended by two further months, in which case we will tell you. You can unsubscribe from marketing emails at any time with the link in each email.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, Belgium - contact@apd-gba.be - www.dataprotectionauthority.be, or with the data protection authority of the EU country where you live or work.

9. COOKIES

We use cookies and similar technologies. Strictly necessary cookies, for example for the shopping cart, checkout, security and remembering your cookie choices, are used without consent because the website cannot work without them. Analytics and marketing cookies are only used if you accept them in our cookie banner. You can change or withdraw your choice at any time through the "Cookie Preferences" link at the bottom of every page, or by deleting cookies in your browser. More information about the cookies used by Shopify stores is available at www.shopify.com/legal/cookies.

10. SECURITY

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, such as encrypted connections (HTTPS), access controls and the security measures of our service providers. No method of transmission or storage is completely secure, so please keep your login details confidential and tell us immediately if you think your account has been compromised.

11. CHILDREN

Our products and services are intended for professionals and adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.

12. CHANGES TO THIS POLICY

We may update this Policy, for example when our services or the law change. The current version is always published on this page with its "Last Updated" date. If a change significantly affects you, we will also inform you by email or on the website.

13. CONTACT

OBDPORTAL BV
Bergensesteenweg 83b, 1651 Beersel, Belgium
Enterprise number (KBO/BCE): 1013.816.284
VAT number: BE 1013.816.284
Email: contact@obdportal.com
Telephone: +32 2 844 56 03
Website: obdportal.com